Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
File: 9PjslsjuJlw9pCMjClUhk2bdmyg.mft (raw, json)
Hash identifier: ChCrO3WeRVDv5zKJhPpe1PKnmuOCBsj+YeDgZkjyny4=
Subject key identifier: 49:5D:31:F8:2E:F4:55:EE:03:AD:CD:68:52:30:F5:2F:39:DF:74:88
Authority key identifier: F4:F8:EC:96:C8:EE:26:5C:3D:A4:23:23:0A:55:21:93:66:DD:9B:28
Certificate issuer: /CN=f4f8ec96c8ee265c3da423230a55219366dd9b28
Certificate serial: 01A10400249F57979D26B003DDB64C1E0B51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
Manifest number: 0F01
Signing time: Sat 03 Oct 2026 23:01:20 +0000
Manifest this update: Sat 03 Oct 2026 23:01:20 +0000
Manifest next update: Sun 04 Oct 2026 23:01:20 +0000
Files and hashes: 1: 9PjslsjuJlw9pCMjClUhk2bdmyg.crl (hash: XuY1GOY0ZOz82eqb0QbEmtmU5+s+nkW7tgsoDHFJNqk=)
2: B2xnjVLlq6B_PpOEtmPjM7HfJcE.roa (hash: Nq8Xgw/1x5u+OoYFPhSCZA8CfwNsYk4XNh9rnTNcOs4=)
3: jm5djjCBI4GuTu1q__jIGCgAw8M.roa (hash: aQBVu8CEknSd70NfkOxHQ8mA1JwVa6QyrHMRXeQPFvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 23:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:04:00:24:9f:57:97:9d:26:b0:03:dd:b6:4c:1e:0b:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f8ec96c8ee265c3da423230a55219366dd9b28
Validity
Not Before: Oct 3 23:01:20 2026 GMT
Not After : Oct 4 23:01:20 2026 GMT
Subject: CN=495d31f82ef455ee03adcd685230f52f39df7488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d1:3f:b3:48:0c:bf:44:1e:35:0a:c5:d9:6a:
80:db:14:54:8f:58:c8:a8:3d:d2:7a:09:c2:a7:cf:
59:5b:9d:df:4d:9a:35:04:69:ac:95:ea:04:60:00:
fe:03:eb:2c:a4:c9:b5:b1:7b:a4:9a:7b:a9:7d:eb:
14:f3:a4:dd:03:2e:85:5f:ea:65:25:10:b8:07:23:
db:7e:54:d0:56:80:b5:b3:00:88:53:27:2b:d5:f8:
c1:99:24:ef:77:4c:d5:57:7a:c4:96:b6:e8:fd:8f:
4d:99:f7:0f:16:7f:2a:04:89:b9:f8:38:43:ef:54:
97:f4:d2:6c:18:24:3f:9b:9f:41:dd:26:1b:42:0c:
02:77:4d:7c:64:64:d7:47:fb:a7:c7:12:7b:c0:36:
5a:e9:57:ca:74:56:ac:eb:e4:fe:06:ad:20:45:31:
63:d6:ee:4a:2d:8d:e0:3c:5b:00:d6:8e:44:c0:ca:
6e:77:85:fc:cc:47:e3:ae:28:16:9e:33:aa:0e:1b:
5a:4d:16:ff:31:22:10:5d:f2:b2:34:56:fb:56:3e:
97:8e:0f:61:b6:7b:20:d8:34:2a:6f:97:22:39:d0:
02:22:4f:91:4c:89:28:bf:60:54:2d:e3:39:36:5e:
73:23:69:85:7e:5f:4b:a2:bf:0e:76:94:96:e2:53:
f5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:5D:31:F8:2E:F4:55:EE:03:AD:CD:68:52:30:F5:2F:39:DF:74:88
X509v3 Authority Key Identifier:
keyid:F4:F8:EC:96:C8:EE:26:5C:3D:A4:23:23:0A:55:21:93:66:DD:9B:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:6e:c4:e5:c1:96:e4:f9:00:7c:a8:57:43:ad:c3:64:f1:5a:
93:ad:b7:4a:ae:fe:ec:84:2d:bc:eb:0b:a2:d1:72:be:3e:29:
6f:a0:87:32:2c:ca:ff:88:79:3a:a8:95:08:ea:48:ef:32:75:
46:66:83:c9:d0:aa:27:be:59:39:51:51:5c:9c:40:6c:f7:25:
b3:d6:c0:8b:08:c0:a3:25:e4:44:81:3c:f3:72:7c:cc:4b:47:
83:31:69:7d:69:7e:c3:7d:18:70:7b:87:7a:f4:dd:d6:50:73:
19:89:a9:15:41:5f:3a:fa:33:85:ba:5f:58:b2:c2:87:ba:74:
10:f1:b3:fa:8e:1f:06:43:86:68:71:51:8c:c7:bf:37:bb:e6:
c8:62:99:ff:fa:a0:ab:c5:2b:0d:3e:42:94:c6:1e:5f:f8:cc:
70:7a:79:e0:6a:de:9a:38:04:de:7b:92:3f:e0:0e:66:c4:38:
46:9f:8c:e8:44:01:ee:2c:b5:5a:d3:c9:89:35:20:1f:a3:90:
86:c9:bb:2e:3d:6b:87:92:85:ad:f5:83:cd:bc:f0:fe:b1:2d:
8b:01:85:6f:48:7a:af:ad:f1:0b:82:16:b3:3d:0e:d1:3e:da:
e4:84:0d:7f:17:e1:43:17:21:24:a6:36:ae:e1:1f:92:55:07:
27:cd:05:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 08:55:53 2026 by rpki-client